[Buildroot] Server administration, and does buildroot have a maintainer?

[Buildroot] Server administration, and does buildroot have a maintainer?

[Rob Landley]

The web page still says Buildroot's maintainer is Erik Andersen, who seems 
kind of busy with other things these days, has handed off all the other 
projects on this server, and last posted to this list 8 months ago.

I ask because Morris got cracked earlier today, and over on freenode we're 
discussing reinstalling it with Gentoo Embedded.  The crack itself was just 
an automated script kiddie compromising apache, and didn't even seem to 
notice _what_ server their bots had hit.  Denys spotted it within 24 hours, 
and OSUOSL has good backups so they could confirm the data seems to be fine, 
but it's generally a good idea to reinstall after getting rootkitted 
_anyway_.

The current server infrastructure is starting to smell.  Morris was 
administered by Erik, who really hasn't got time anymore.  (He made noises 
about reinstalling with a newer Debian version back in May, but doesn't seem 
to have actually done so.)  We were discussing reinstalling with something 
uClibc-based back in August (off-list) because of this, but Mike objected 
that actually using uClibc for real production use wasn't feasible due to a 
lack of manpower (and you wonder why Bernhard is uClibc maintainer now?), and 
the thread was tabled.  Now we're paying attention again.

We're looking at gentoo embedded because then we'd be dogfooding uClibc and 
busybox, which is cool.  (No, buildroot is not an option; you have no package 
management, and the project has still never had an actual _release_.  The 
OSUOSL guys would really like something that's actually capable of being A) 
administered after installation, B) reliably reproduced.)  The OSUOSL guys 
have an auto-administration system that a couple variants of Gentoo are 
already registered in, and are willing to at least look at extending it to 
handle gentoo embedded.  (An alternative is that Solar and I can admin it, 
and since he's the gentoo embedded maintainer it doesn't get much better than 
that...)

This is probably going to result in some service interruptions later this 
week.  (For one thing we're moving the mailing list off the virtual machine 
and onto OSUOSL dedicated mail servers.  Hopefully you guys won't be impacted 
by that part, but you never know; I'm not quite sure what URL the archives 
will wind up at yet.)  But getting svn and the web repository viewer and 
mantis (bug database) and so on up under the new system's going to be a bit 
intersting, and will almost certainly involve some downtime while all the 
data is transferred and various .config files are hit with large hammers.

Bernhard and Denys have been pinged, and if buildroot has a maintainer I'd 
like to keep him/her in the loop.  (If said maintainer is still Erik, then 
he's aware of the crack already, he just said he didn't have time to properly 
deal with it just now and delegated it back to the rest of us.)

Rob

[Buildroot] Server administration, and does buildroot have a maintainer?

[Ulf Samuelsson]

> The web page still says Buildroot's maintainer is Erik Andersen, who seems
> kind of busy with other things these days, has handed off all the other
> projects on this server, and last posted to this list 8 months ago.
>
> I ask because Morris got cracked earlier today, and over on freenode we're
> discussing reinstalling it with Gentoo Embedded.


Go ahead.
Maybe it is time sot set up a git server, at least as an alternative?

Best Regards
Ulf Samuelsson                ulf at atmel.com

[Buildroot] Server administration, and does buildroot have a maintainer?

[Roberto A. Foglietta]

2008/11/10 Rob Landley <rob@landley.net>:

[cut]

>
> We're looking at gentoo embedded because then we'd be dogfooding uClibc and
> busybox, which is cool.  (No, buildroot is not an option; you have no package
> management, and the project has still never had an actual _release_.  The
> OSUOSL guys would really like something that's actually capable of being A)
> administered after installation, B) reliably reproduced.)  The OSUOSL guys
> have an auto-administration system that a couple variants of Gentoo are
> already registered in, and are willing to at least look at extending it to
> handle gentoo embedded.  (An alternative is that Solar and I can admin it,
> and since he's the gentoo embedded maintainer it doesn't get much better than
> that...)
>

http://groups.google.com/group/comp.os.linux.embedded/browse_thread/thread/e0eb218d42e19e67?hl=en&pli=1


Here is a (far incomplete) list of features for OE.
http://wiki.openembedded.net/index.php/Features

Functional

  * cross-compile packages for various CPU architectures like x86,
x86_64/amd64, powerpc, arm (various generations), mips, avr32
  * build complete bootable distributions that can be installed on flash or
SD/MMC media
  * build compatible package for non-OpenEmbedded based distributions like
Maemo, OpenWRT or various 'vendor Linuxes'
  * build thousands of software packages using all kinds of programming
languages and runtime environments like C/C++, Perl, Python, Java, Mono
  * create binary packages in IPK, RPM, DEB or tar.gz format
  * chose from a wide range of C libraries as the base of your distribution:
glibc, uclibc or eglibc
  * optionally employ Debian-like naming on binary packages (e.g. libfoo)
  * create complete toolchain packages for your target system which can be
deployed on application developer machines

Non-functional

  * reproduceable builds (let two persons with two different machines but
same setup create the same binary)
  * strongly self-hosting, requires only a minimum of tools to be installed
right away



 Cheers,
-- 
/roberto

[Buildroot] Server administration, and does buildroot have a maintainer?

[Peter Korsgaard]

>>>>> "Rob" == Rob Landley <rob@landley.net> writes:

Hi,

 Rob> The web page still says Buildroot's maintainer is Erik Andersen,
 Rob> who seems kind of busy with other things these days, has handed
 Rob> off all the other projects on this server, and last posted to
 Rob> this list 8 months ago.

Yeah, Erik basically doesn't do any uclibc.org work anymore, buildroot
or otherwise.

BR doesn't have a single maintainer, but I'm one of the old timers (so
is Bernhard, but he forked).

 Rob> I ask because Morris got cracked earlier today, and over on
 Rob> freenode we're discussing reinstalling it with Gentoo Embedded.
 Rob> The crack itself was just an automated script kiddie
 Rob> compromising apache, and didn't even seem to notice _what_
 Rob> server their bots had hit.  Denys spotted it within 24 hours,
 Rob> and OSUOSL has good backups so they could confirm the data seems
 Rob> to be fine, but it's generally a good idea to reinstall after
 Rob> getting rootkitted _anyway_.

Yeah :/

 Rob> We're looking at gentoo embedded because then we'd be dogfooding
 Rob> uClibc and busybox, which is cool.  (No, buildroot is not an
 Rob> option; you have no package management, and the project has
 Rob> still never had an actual _release_.

/me mumbles something about getting a release out "soon" - But yeah.

I personally prefer Debian, but whatever floats your boat - As long as
stuff works you won't hear me complain. Lets just keep things simple.

 Rob> Bernhard and Denys have been pinged, and if buildroot has a
 Rob> maintainer I'd like to keep him/her in the loop.  (If said
 Rob> maintainer is still Erik, then he's aware of the crack already,
 Rob> he just said he didn't have time to properly deal with it just
 Rob> now and delegated it back to the rest of us.)

I would like to be kept in the loop.

-- 
Bye, Peter Korsgaard